Skip to content

Commit 721226c

Browse files
chore(deps): bump aead.dev/minisign from 0.2.0 to 0.3.0
Bumps [aead.dev/minisign](https://github.com/aead/minisign) from 0.2.0 to 0.3.0. - [Release notes](https://github.com/aead/minisign/releases) - [Commits](aead/minisign@v0.2.0...v0.3.0) --- updated-dependencies: - dependency-name: aead.dev/minisign dependency-version: 0.3.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
1 parent d0ebeda commit 721226c

File tree

11 files changed

+294
-126
lines changed

11 files changed

+294
-126
lines changed

go.mod

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ module github.com/lacework/go-sdk/v2
33
go 1.24.0
44

55
require (
6-
aead.dev/minisign v0.2.0
6+
aead.dev/minisign v0.3.0
77
cloud.google.com/go/compute v1.29.0
88
cloud.google.com/go/compute/metadata v0.6.0
99
cloud.google.com/go/oslogin v1.14.2

go.sum

Lines changed: 2 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
1-
aead.dev/minisign v0.2.0 h1:kAWrq/hBRu4AARY6AlciO83xhNnW9UaC8YipS2uhLPk=
2-
aead.dev/minisign v0.2.0/go.mod h1:zdq6LdSd9TbuSxchxwhpA9zEb9YXcVGoE8JakuiGaIQ=
1+
aead.dev/minisign v0.3.0 h1:8Xafzy5PEVZqYDNP60yJHARlW1eOQtsKNp/Ph2c0vRA=
2+
aead.dev/minisign v0.3.0/go.mod h1:NLvG3Uoq3skkRMDuc3YHpWUTMTrSExqm+Ij73W13F6Y=
33
cloud.google.com/go v0.116.0 h1:B3fRrSDkLRt5qSHWe40ERJvhvnQwdZiHu0bJOpldweE=
44
cloud.google.com/go v0.116.0/go.mod h1:cEPSRWPzZEswwdr9BxE6ChEn01dWlTaF05LiC2Xs70U=
55
cloud.google.com/go/auth v0.13.0 h1:8Fu8TZy167JkW8Tj3q7dIkr2v4cndv41ouecJx0PAHs=
@@ -379,7 +379,6 @@ go.uber.org/zap v1.24.0/go.mod h1:2kMP+WWQ8aoFoedH3T2sq6iJ2yDWpHbP0f6MQbS9Gkg=
379379
golang.org/x/crypto v0.0.0-20190219172222-a4c6cb3142f2/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
380380
golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
381381
golang.org/x/crypto v0.0.0-20190530122614-20be4c3c3ed5/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
382-
golang.org/x/crypto v0.0.0-20210220033148-5ea612d1eb83/go.mod h1:jdWPYTVW3xRLrWPugEBEK3UY2ZEsg3UU495nc5E+M+I=
383382
golang.org/x/crypto v0.0.0-20210322153248-0c34fe9e7dc2/go.mod h1:T9bdIzuCu7OtxOm1hfPfRQxPLYneinmdGuTeoZ9dtd4=
384383
golang.org/x/crypto v0.0.0-20210421170649-83a5a9bb288b/go.mod h1:T9bdIzuCu7OtxOm1hfPfRQxPLYneinmdGuTeoZ9dtd4=
385384
golang.org/x/crypto v0.0.0-20210616213533-5ff15b29337e/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
@@ -428,7 +427,6 @@ golang.org/x/sys v0.0.0-20200223170610-d5e6a3e2c0ae/go.mod h1:h1NjWce9XRLGQEsW7w
428427
golang.org/x/sys v0.0.0-20200302150141-5c8b2ff67527/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
429428
golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
430429
golang.org/x/sys v0.0.0-20210124154548-22da62e12c0c/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
431-
golang.org/x/sys v0.0.0-20210228012217-479acdf4ea46/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
432430
golang.org/x/sys v0.0.0-20210320140829-1e4c9ba3b0c4/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
433431
golang.org/x/sys v0.0.0-20210324051608-47abb6519492/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
434432
golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -445,7 +443,6 @@ golang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
445443
golang.org/x/sys v0.13.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
446444
golang.org/x/sys v0.32.0 h1:s77OFDvIQeibCmezSnk/q6iAfkdiQaJi4VzroCFrN20=
447445
golang.org/x/sys v0.32.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
448-
golang.org/x/term v0.0.0-20201117132131-f5c789dd3221/go.mod h1:Nr5EML6q2oocZ2LXRh80K7BxOlk5/8JxuGnuhpl+muw=
449446
golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
450447
golang.org/x/term v0.0.0-20210503060354-a79de5458b56/go.mod h1:tfny5GFUkzUvx4ps4ajbZsCe5lw1metzhBm9T3x7oIY=
451448
golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
Lines changed: 18 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -1,32 +1,34 @@
11
linters-settings:
2-
golint:
3-
min-confidence: 0
4-
52
misspell:
63
locale: US
74

5+
staticcheck:
6+
checks: ["all", "-SA1019"]
7+
88
linters:
99
disable-all: true
1010
enable:
11-
- typecheck
11+
- durationcheck
12+
- gocritic
13+
- gofmt
1214
- goimports
13-
- misspell
15+
- gomodguard
1416
- govet
15-
- golint
1617
- ineffassign
17-
- gosimple
18-
- deadcode
19-
- unparam
20-
- unused
21-
- structcheck
22-
- prealloc
23-
- maligned
18+
- misspell
19+
- revive
20+
- staticcheck
21+
- tenv
22+
- typecheck
2423
- unconvert
24+
- unused
2525

2626
issues:
2727
exclude-use-default: false
2828
exclude:
29-
- should have a package comment
30-
- error strings should not be capitalized or end with punctuation or a newline
29+
- "package-comments: should have a package comment"
30+
- "exitAfterDefer:"
31+
- "captLocal:"
32+
3133
service:
32-
golangci-lint-version: 1.35.0 # use the fixed version to not introduce new linters unexpectedly
34+
golangci-lint-version: 1.57.2 # use the fixed version to not introduce new linters unexpectedly

vendor/aead.dev/minisign/Makefile

Lines changed: 53 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,53 @@
1+
ifneq ($(shell go env GOBIN),)
2+
GOBIN := $(shell go env GOBIN)
3+
else
4+
GOBIN := $(shell $(go env GOPATH)/bin)
5+
endif
6+
7+
.PHONY: build check release test lint update-tools
8+
9+
build:
10+
@mkdir -m 0755 -p ${GOBIN}
11+
@CGO_ENABLED=0 go build -trimpath -ldflags "-s -w" -o ${GOBIN}/minisign ./cmd/minisign
12+
13+
check:
14+
@gofmt -d . && echo No formatting issue found.
15+
@govulncheck ./...
16+
17+
release:
18+
ifneq ($(shell git status -s) , )
19+
@(echo "Repository contains modified files." && exit 1)
20+
else
21+
@echo -n Building minisign ${VERSION} for linux/amd64...
22+
@GOOS=linux GOARCH=amd64 CGO_ENABLED=0 go build -trimpath -ldflags "-s -w" -o ./minisign ./cmd/minisign
23+
@tar -czf minisign-linux-amd64.tar.gz ./minisign ./LICENSE ./README.md
24+
@echo " DONE."
25+
26+
@echo -n Building minisign ${VERSION} for linux/arm64...
27+
@GOOS=linux GOARCH=arm64 CGO_ENABLED=0 go build -trimpath -ldflags "-s -w" -o ./minisign ./cmd/minisign
28+
@tar -czf minisign-linux-arm64.tar.gz ./minisign ./LICENSE ./README.md
29+
@echo " DONE."
30+
31+
@echo -n Building minisign ${VERSION} for darwin/arm64...
32+
@GOOS=darwin GOARCH=arm64 CGO_ENABLED=0 go build -trimpath -ldflags "-s -w" -o ./minisign ./cmd/minisign
33+
@tar -czf minisign-darwin-arm64.tar.gz ./minisign ./LICENSE ./README.md
34+
@echo " DONE."
35+
36+
@echo -n Building minisign ${VERSION} for windows/amd64...
37+
@GOOS=windows GOARCH=amd64 CGO_ENABLED=0 go build -trimpath -ldflags "-s -w" -o ./minisign ./cmd/minisign
38+
@zip -q minisign-windows-amd64.zip ./minisign ./LICENSE ./README.md
39+
@echo " DONE."
40+
41+
@rm ./minisign
42+
endif
43+
44+
test:
45+
@CGO_ENABLED=0 go test -ldflags "-s -w" ./...
46+
47+
lint:
48+
@go vet ./...
49+
@golangci-lint run --config ./.golangci.yml
50+
51+
update-tools:
52+
@CGO_ENABLED=0 go install github.com/golangci/golangci-lint/cmd/golangci-lint@latest
53+
@CGO_ENABLED=0 go install golang.org/x/vuln/cmd/govulncheck@latest

vendor/aead.dev/minisign/README.md

Lines changed: 32 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,7 @@
33
[![latest](https://badgen.net/github/tag/aead/minisign)](https://github.com/aead/minisign/releases/latest)
44

55
# minisign
6+
67
minisign is a dead simple tool to sign files and verify signatures.
78

89
```
@@ -37,13 +38,16 @@ This is a Go implementation of the [original C implementation](https://github.co
3738

3839
```
3940
Usage:
40-
minisign -G [-p <pubKey>] [-s <secKey>]
41+
minisign -G [-p <pubKey>] [-s <secKey>] [-W]
42+
minisign -R [-s <secKey>] [-p <pubKey>]
43+
minisign -C [-s <secKey>] [-W]
4144
minisign -S [-x <signature>] [-s <secKey>] [-c <comment>] [-t <comment>] -m <file>...
4245
minisign -V [-H] [-x <signature>] [-p <pubKey> | -P <pubKey>] [-o] [-q | -Q ] -m <file>
43-
minisign -R [-s <secKey>] [-p <pubKey>]
44-
46+
4547
Options:
46-
-G Generate a new public/secret key pair.
48+
-G Generate a new public/secret key pair.
49+
-R Re-create a public key file from a secret key.
50+
-C Change or remove the password of the secret key.
4751
-S Sign files with a secret key.
4852
-V Verify files with a public key.
4953
-m <file> The file to sign or verify.
@@ -52,33 +56,41 @@ Options:
5256
-p <pubKey> Public key file (default: ./minisign.pub)
5357
-P <pubKey> Public key as base64 string
5458
-s <secKey> Secret key file (default: $HOME/.minisign/minisign.key)
59+
-W Do not encrypt/decrypt the secret key with a password.
5560
-x <signature> Signature file (default: <file>.minisig)
5661
-c <comment> Add a one-line untrusted comment.
5762
-t <comment> Add a one-line trusted comment.
5863
-q Quiet mode. Suppress output.
5964
-Q Pretty quiet mode. Combined with -V, only print the trusted comment.
60-
-R Re-create a public key file from a secret key.
6165
-f Combined with -G or -R, overwrite any existing public/secret key pair.
6266
-v Print version information.
6367
```
6468

6569
## Installation
6670

67-
On windows, linux and macOS, you can use the pre-built binaries:
68-
| OS | ARCH | Latest Release |
69-
|:---------:|:-------:|:-----------------------------------------------------------------------------------------------------------------------|
70-
| Linux | amd64 | [minisign-linux-amd64.tar.gz](https://github.com/aead/minisign/releases/download/v0.1.2/minisign-linux-amd64.tar.gz) |
71-
| Linux | arm64 | [minisign-linux-arm64.tar.gz](https://github.com/aead/minisign/releases/download/v0.1.2/minisign-linux-arm64.tar.gz) |
72-
| MacOS | arm64 | [minisign-darwin-arm64.tar.gz](https://github.com/aead/minisign/releases/download/v0.1.2/minisign-darwin-arm64.tar.gz) |
73-
| MacOS | amd64 | [minisign-darwin-amd64.tar.gz](https://github.com/aead/minisign/releases/download/v0.1.2/minisign-darwin-amd64.tar.gz) |
74-
| Windows | amd64 | [minisign-windows-amd64.zip](https://github.com/aead/minisign/releases/download/v0.1.2/minisign-windows-amd64.zip) |
75-
76-
If your system has [Go1.16+](https://golang.org/dl/), you can build from source:
71+
With an up-to-date Go toolchain:
7772
```
78-
git clone https://aead.dev/minisign && cd minisign
79-
go build -o . aead.dev/minisign/cmd/minisign
73+
go install aead.dev/minisign/cmd/minisign@latest
8074
```
8175

76+
On windows, linux and macOS, you can also use the pre-built binaries:
77+
| OS | ARCH | Latest Release |
78+
|:---------:|:-------:|:-----------------------------------------------------------------------------------------------------------------------|
79+
| Linux | amd64 | [minisign-linux-amd64.tar.gz](https://github.com/aead/minisign/releases/download/v0.3.0/minisign-linux-amd64.tar.gz) |
80+
| Linux | arm64 | [minisign-linux-arm64.tar.gz](https://github.com/aead/minisign/releases/download/v0.3.0/minisign-linux-arm64.tar.gz) |
81+
| MacOS | arm64 | [minisign-darwin-arm64.tar.gz](https://github.com/aead/minisign/releases/download/v0.3.0/minisign-darwin-arm64.tar.gz) |
82+
| Windows | amd64 | [minisign-windows-amd64.zip](https://github.com/aead/minisign/releases/download/v0.3.0/minisign-windows-amd64.zip) |
83+
84+
From source:
85+
1. Clone the repository
86+
```
87+
git clone https://aead.dev/minisign && cd minisign
88+
```
89+
2. Build the binary
90+
```
91+
make build
92+
```
93+
8294
## Library
8395

8496
```Go
@@ -100,14 +112,14 @@ import (
100112
func main() {
101113
var message = []byte("Hello World!")
102114

103-
public, private, err := minisign.GenerateKey(rand.Reader)
115+
publicKey, privateKey, err := minisign.GenerateKey(rand.Reader)
104116
if err != nil {
105117
log.Fatalln(err)
106118
}
107119

108-
signature := minisign.Sign(private, message)
120+
signature := minisign.Sign(privateKey, message)
109121

110-
if !minisign.Verify(public, message, signature) {
122+
if !minisign.Verify(publicKey, message, signature) {
111123
log.Fatalln("signature verification failed")
112124
}
113125
log.Println(string(message))

vendor/aead.dev/minisign/minisign.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -162,7 +162,7 @@ func Verify(publicKey PublicKey, message, signature []byte) bool {
162162
}
163163

164164
func sign(privateKey PrivateKey, message []byte, trustedComment, untrustedComment string, isHashed bool) []byte {
165-
var algorithm = EdDSA
165+
algorithm := EdDSA
166166
if isHashed {
167167
algorithm = HashEdDSA
168168
}

vendor/aead.dev/minisign/minisign.pub

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
untrusted comment: minisign public key D7E531EE76B2FC6F
2+
RWRv/LJ27jHl10fMd7ozqYIs8zOaPqWf6EjnWSqkOpOQiD1UJpOgCFm0

0 commit comments

Comments
 (0)